Examples with GroupModel org.keycloak.models.GroupModel used on opensource projects

Example 46 with GroupModel

use of org.keycloak.models.GroupModel in project keycloak by keycloak.

the class RealmAdminResource method addDefaultGroup.

@PUT
@NoCache
@Path("default-groups/{groupId}")
public void addDefaultGroup(@PathParam("groupId") String groupId) {
    auth.realm().requireManageRealm();
    GroupModel group = realm.getGroupById(groupId);
    if (group == null) {
        throw new NotFoundException("Group not found");
    }
    realm.addDefaultGroup(group);
    adminEvent.operation(OperationType.CREATE).resource(ResourceType.GROUP).resourcePath(session.getContext().getUri()).success();
}

Example 47 with GroupModel

use of org.keycloak.models.GroupModel in project keycloak by keycloak.

the class RealmAdminResource method removeDefaultGroup.

@DELETE
@NoCache
@Path("default-groups/{groupId}")
public void removeDefaultGroup(@PathParam("groupId") String groupId) {
    auth.realm().requireManageRealm();
    GroupModel group = realm.getGroupById(groupId);
    if (group == null) {
        throw new NotFoundException("Group not found");
    }
    realm.removeDefaultGroup(group);
    adminEvent.operation(OperationType.DELETE).resource(ResourceType.GROUP).resourcePath(session.getContext().getUri()).success();
}

Example 48 with GroupModel

use of org.keycloak.models.GroupModel in project keycloak by keycloak.

the class RealmAdminResource method getGroupByPath.

@GET
@Path("group-by-path/{path: .*}")
@NoCache
@Produces(MediaType.APPLICATION_JSON)
public GroupRepresentation getGroupByPath(@PathParam("path") String path) {
    GroupModel found = KeycloakModelUtils.findGroupByPath(realm, path);
    if (found == null) {
        throw new NotFoundException("Group path does not exist");
    }
    auth.groups().requireView(found);
    return ModelToRepresentation.toGroupHierarchy(found, true);
}

Example 49 with GroupModel

use of org.keycloak.models.GroupModel in project keycloak by keycloak.

the class GroupResource method addChild.

/**
 * Set or create child.  This will just set the parent if it exists.  Create it and set the parent
 * if the group doesn't exist.
 *
 * @param rep
 */
@POST
@Path("children")
@NoCache
@Produces(MediaType.APPLICATION_JSON)
@Consumes(MediaType.APPLICATION_JSON)
public Response addChild(GroupRepresentation rep) {
    this.auth.groups().requireManage(group);
    String groupName = rep.getName();
    if (ObjectUtil.isBlank(groupName)) {
        return ErrorResponse.error("Group name is missing", Response.Status.BAD_REQUEST);
    }
    Response.ResponseBuilder builder = Response.status(204);
    GroupModel child = null;
    if (rep.getId() != null) {
        child = realm.getGroupById(rep.getId());
        if (child == null) {
            throw new NotFoundException("Could not find child by id");
        }
        realm.moveGroup(child, group);
        adminEvent.operation(OperationType.UPDATE);
    } else {
        child = realm.createGroup(groupName, group);
        updateGroup(rep, child);
        URI uri = session.getContext().getUri().getBaseUriBuilder().path(session.getContext().getUri().getMatchedURIs().get(2)).path(child.getId()).build();
        builder.status(201).location(uri);
        rep.setId(child.getId());
        adminEvent.operation(OperationType.CREATE);
    }
    adminEvent.resourcePath(session.getContext().getUri()).representation(rep).success();
    GroupRepresentation childRep = ModelToRepresentation.toGroupHierarchy(child, true);
    return builder.type(MediaType.APPLICATION_JSON_TYPE).entity(childRep).build();
}

Example 50 with GroupModel

use of org.keycloak.models.GroupModel in project keycloak by keycloak.

the class LDAPSyncTest method test08LDAPGroupSyncAfterGroupRename.

@Test
public void test08LDAPGroupSyncAfterGroupRename() {
    testingClient.server().run(session -> {
        LDAPTestContext ctx = LDAPTestContext.init(session);
        RealmModel appRealm = ctx.getRealm();
        String descriptionAttrName = LDAPTestUtils.getGroupDescriptionLDAPAttrName(ctx.getLdapProvider());
        // Add group mapper
        LDAPTestUtils.addOrUpdateGroupMapper(appRealm, ctx.getLdapModel(), LDAPGroupMapperMode.READ_ONLY, descriptionAttrName);
        LDAPObject group1 = LDAPTestUtils.createLDAPGroup(session, appRealm, ctx.getLdapModel(), "group1", descriptionAttrName, "group1 - description");
        LDAPObject group2 = LDAPTestUtils.createLDAPGroup(session, appRealm, ctx.getLdapModel(), "group2", descriptionAttrName, "group2 - description");
        LDAPUtils.addMember(ctx.getLdapProvider(), MembershipType.DN, LDAPConstants.MEMBER, "not-used", group2, group1);
        ComponentModel mapperModel = LDAPTestUtils.getSubcomponentByName(appRealm, ctx.getLdapModel(), "groupsMapper");
        LDAPTestUtils.updateGroupMapperConfigOptions(mapperModel, GroupMapperConfig.PRESERVE_GROUP_INHERITANCE, "false");
        ctx.getRealm().updateComponent(mapperModel);
        // sync groups to Keycloak
        new GroupLDAPStorageMapperFactory().create(session, mapperModel).syncDataFromFederationProviderToKeycloak(appRealm);
    });
    testingClient.server().run(session -> {
        LDAPTestContext ctx = LDAPTestContext.init(session);
        RealmModel appRealm = ctx.getRealm();
        GroupModel kcGroup1 = KeycloakModelUtils.findGroupByPath(appRealm, "/group1");
        String descriptionAttrName = LDAPTestUtils.getGroupDescriptionLDAPAttrName(ctx.getLdapProvider());
        Assert.assertEquals("group1 - description", kcGroup1.getFirstAttribute(descriptionAttrName));
    });
    testingClient.server().run(session -> {
        LDAPTestContext ctx = LDAPTestContext.init(session);
        RealmModel appRealm = ctx.getRealm();
        String descriptionAttrName = LDAPTestUtils.getGroupDescriptionLDAPAttrName(ctx.getLdapProvider());
        // Add group mapper
        LDAPTestUtils.addOrUpdateGroupMapper(appRealm, ctx.getLdapModel(), LDAPGroupMapperMode.LDAP_ONLY, descriptionAttrName);
        ComponentModel mapperModel = LDAPTestUtils.getSubcomponentByName(appRealm, ctx.getLdapModel(), "groupsMapper");
        LDAPStorageProvider ldapProvider = LDAPTestUtils.getLdapProvider(session, ctx.getLdapModel());
        GroupLDAPStorageMapper groupMapper = LDAPTestUtils.getGroupMapper(mapperModel, ldapProvider, appRealm);
        LDAPObject group1Loaded = groupMapper.loadLDAPGroupByName("group1");
        // update group name and description
        group1Loaded.setSingleAttribute(group1Loaded.getRdnAttributeNames().get(0), "group5");
        group1Loaded.setSingleAttribute(descriptionAttrName, "group5 - description");
        LDAPTestUtils.updateLDAPGroup(session, appRealm, ctx.getLdapModel(), group1Loaded);
        // sync to Keycloak should pass without an error
        SynchronizationResult syncResult = new GroupLDAPStorageMapperFactory().create(session, mapperModel).syncDataFromFederationProviderToKeycloak(appRealm);
        Assert.assertThat(syncResult.getFailed(), Matchers.is(0));
    });
    testingClient.server().run(session -> {
        LDAPTestContext ctx = LDAPTestContext.init(session);
        RealmModel appRealm = ctx.getRealm();
        // load previously synced group (a new group has been created in Keycloak)
        GroupModel kcGroup5 = KeycloakModelUtils.findGroupByPath(appRealm, "/group5");
        String descriptionAttrName = LDAPTestUtils.getGroupDescriptionLDAPAttrName(ctx.getLdapProvider());
        Assert.assertEquals("group5 - description", kcGroup5.getFirstAttribute(descriptionAttrName));
    });
}